Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbVf8KJJCmuTj8BH2sFVTAX9-6o.roa
File: xbVf8KJJCmuTj8BH2sFVTAX9-6o.roa (raw, json)
Hash identifier: vQ+xbVh3iaKt+9azpws/rSvQ71ikfC5Q/8zOneakuuM=
Subject key identifier: C5:B5:5F:F0:A2:49:0A:6B:93:8F:C0:47:DA:C1:55:4C:05:FD:FB:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867CA9534C131C4F138FD79E00A9FED9F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbVf8KJJCmuTj8BH2sFVTAX9-6o.roa
Signing time: Thu 23 Feb 2023 05:05:17 +0000
ROA not before: Thu 23 Feb 2023 05:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:7ca8:cda2/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:a9:53:4c:13:1c:4f:13:8f:d7:9e:00:a9:fe:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 05:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5b55ff0a2490a6b938fc047dac1554c05fdfbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:bd:16:27:2c:7f:42:77:d1:35:f5:04:bb:
ac:7b:e5:b2:62:ca:50:72:d0:b1:2e:98:91:dd:07:
88:05:de:64:26:82:79:15:d7:42:48:c5:a5:03:1d:
d3:aa:01:67:56:90:c9:73:40:dd:de:49:2d:ac:0a:
97:9d:e3:3f:4d:2a:04:6e:6b:3f:3d:71:fd:8b:2b:
42:ba:cc:a3:6d:2a:29:ab:2b:5f:07:41:9e:f7:4b:
55:fd:a7:22:62:0f:39:76:8c:86:b0:68:6f:94:c3:
bc:88:be:21:07:fe:6e:c1:12:62:61:41:4e:47:be:
b3:b4:74:25:81:6c:42:5e:1b:e1:32:7c:b2:af:95:
c6:77:4e:0d:7a:a5:b0:3a:e5:93:f5:e6:d5:88:2f:
99:0a:ab:41:18:97:46:7d:43:69:2c:5c:41:0b:aa:
72:75:81:f2:94:9a:d0:09:4d:fc:19:94:ce:47:ad:
1b:e4:7e:47:ca:82:7a:ca:cd:a1:93:9f:ce:38:e5:
6f:9b:98:ad:da:91:b7:5f:db:07:84:5b:fe:cc:c2:
88:7c:37:cc:8b:1c:07:43:a8:a3:56:eb:55:7e:41:
cc:1e:d0:aa:b6:ab:76:5b:44:8a:e7:7b:ac:13:0b:
25:6b:46:5b:d1:a7:b4:90:8d:ac:ee:a2:ce:4b:19:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B5:5F:F0:A2:49:0A:6B:93:8F:C0:47:DA:C1:55:4C:05:FD:FB:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbVf8KJJCmuTj8BH2sFVTAX9-6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:6d:3e:21:43:45:ea:ed:27:9f:a9:93:ff:5a:80:32:cd:a2:
ae:34:52:7f:96:ef:7f:d5:71:a6:65:be:c2:83:4e:3a:dc:9f:
de:7a:38:b5:90:39:91:84:33:6d:bb:f4:3b:e2:6f:29:ab:7a:
19:55:dd:ef:ee:75:25:92:74:84:42:98:0d:a3:eb:b1:c9:db:
57:3c:4a:eb:61:25:9b:c8:4b:93:27:18:5a:7b:97:b3:f5:a4:
26:25:0b:c5:e9:25:69:08:37:6c:ad:45:b6:1c:93:8f:d5:26:
de:e3:93:4a:b2:d9:8c:43:a8:17:db:16:b6:a5:cc:08:05:f6:
30:4e:6e:13:b7:c7:7c:dc:00:a5:b0:c1:71:44:77:ba:de:1e:
66:1e:ef:2b:c4:5e:6e:ab:34:4c:d8:2b:5e:3a:ae:0d:a5:bb:
95:14:ea:3c:4b:cf:79:97:1a:88:c1:06:d0:73:8b:34:3a:ff:
4d:7e:d3:df:ee:a9:f2:e6:df:42:4c:8f:35:16:7e:24:1f:a1:
5a:3e:85:97:e4:d0:e8:9a:ed:9b:95:45:4b:ef:6b:c7:62:c2:
75:2b:30:b5:6f:de:3d:cb:dc:5c:d3:7a:79:c1:00:97:74:47:
11:f0:db:b5:40:f8:3a:7e:7e:ba:99:32:ce:ba:b9:58:2b:97:
c7:bc:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:15:03 2025 by rpki-client